High
CVE-2022-4307
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2022-4672
WordPress Simple PayPal Shopping Cart <= 4.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4673
Rate my Post – WP Rating System <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4746
FluentAuth <= 1.0.1 - IP Spoofing to Protection Mechanism Bypass
Medium
CVE-2022-4718
Landing Page Builder <= 1.4.9.8.9 - Authenticated (Contributor+) Cross-Site Scripting via Shortcode
Medium
CVE-2022-4668
Easy Appointments <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-3811
EU Cookie Law <= 3.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Low
762
LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Login - Other
Medium
CVE-2021-30134
php-mod/curl allows Cross-site Scripting
Critical
CVE-2022-4742
json-pointer vulnerable to Prototype Pollution
Critical
CVE-2022-4060
User Post Gallery - UPG <= 2.19 - Missing Authorization to Remote Command Execution
Critical
CVE-2020-36632
flat vulnerable to Prototype Pollution
High
CVE-2021-4279
Starcounter-Jack JSON-Patch Prototype Pollution vulnerability
High
CVE-2021-4278
tree-kit vulnerable to Prototype Pollution
High
CVE-2020-36629
SimbCo httpster vulnerable to Path Traversal
Medium
CVE-2022-44381
Snipe-IT allows attackers to check whether a user account exists
Medium
CVE-2022-44380
Snipe-IT vulnerable to Cross Site Scripting for View Assigned Assets
High
CVE-2022-45197
Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp.
Medium
CVE-2022-4832
Store Locator WordPress <= 1.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2022-4547
Conditional Payment Methods for WooCommerce <= 1.0 - Authenticated (Admin+) SQL Injection
Medium
CVE-2022-4576
Easy Bootstrap Shortcode <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2022-47945
ThinkPHP Framework vulnerable to remote code execution
High
CVE-2022-40899
An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server.
High
CVE-2022-40898
An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.